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Abstract 

We want to find a marked element out of a black box containing A^ 

elements. When the number of marked elements is known this can be done 

^ . elegantly with Grover's algorithm, a variant of which even gives a correct 

result with certainty. On the other hand, when the number of marked 
elements is not known the problem becomes more difhcult. For every 
prescribed success probability I give an algorithm consisting of several 
)i-C ' runs of Grover's algorithm that matches a recent bound M on the order 

Qv , of the number of queries to the black box. The improvement in the order 

Q\ ' over a previously known algorithm is small and the number of queries can 

clearly still be reduced by a constant factor. 

_ 1 Introduction 

^ ' We are given a subroutine which for every one of N possible inputs gives us a 

qh| or a 1 as output. The subroutine is in a "black box", so we are not allowed 

to see what algorithm it uses. The problem is to find an input for which the 
subroutine gives 1 (a "marked" input or "element") or to say that there is no 
such input. 
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JH I Classically there is no other way than to try out many inputs on the sub- 

routine. On the other hand, if the subroutine also works for superpositions of 



inputs 



^c^\x) -> ^c^\xj{x)) 



we can use Grover's quantum searching algorithm R] to find a "marked element" 
(an input that yields 1) which gives us a quadratic speedup relative to the 
classical method. In particular when we know the number t of marked elements, 
Grover's algorithm will find one of these elements with high probability using 
only about n/Ay^N/t queries to the subroutine. A slight modification of this 
algorithm can actually increase the success probability to 1 while using at most 
one more query (see below) . All this also works when we are only told that the 
number of marked elements is either t or 0. 



2 Unknown number of marked elements 

On the other hand, when we don't know the number of marked elements, 
Grover's algorithm doesn't perform that well. In particular to get a certainly 
correct answer any algorithm will use on the order of N queries as for the clas- 
sical case [g[. 

If we allow for some error probability, a Grover type quantum search still 
helps. Note that when the quantum algorithm outputs a candidate marked 
element, we can check it with just one more query. Thus the only error that can 
happen, is that the algorithm wrongly says that there are no marked elements. 
Thus the error is so-called one sided and we have not only a quantum Monte 
Carlo algorithm (BQP) but actually a quantum-RP algorithm. 

So the problem now is: Given N and some upper bound on the error proba- 
bility e, find an algorithm that uses as few queries to the black box as possible. 
Note that by error probability we mean the error probability for the worst case, 
which here in particular means the number of marked elements for which the 
algorithm performs worst. 

2.1 A simple algorithm 

A simple, but not optimal, solution to this problem is to run Grover's algorithm 
many times for some random number of iterations {— number of queries) be- 
tween and Tr/iy/N, which is about the optimum for just one marked element. 
We choose the number of iterations of each run uniformly at random from the 
given range. From the evolution of the state vector (of the QC) in Grover's 
algorithm (see below) it is easy to see that in each such run and for any number 
of marked elements (except 0) the probability of finding a marked element is 
about 1/2. Actually a careful analysis (see below) shows that for the worst-case 
number of marked elements t, it's about 0.3914. By repeating this many times 
we get asymptotically at most about the following number of queries: 

T«7^/4^/]v ^"^^^ 



ln(l - 0.3914) 



2.2 The improved algorithm 

The proposed algorithm again basically consists of many runs of Grover's algo- 
rithm, each for some numbers of iterations (=numbcr of queries). It consists of 
2 parts plus possibly a third one to improve it a bit. 

The first part checks for all numbers of marked elements from 1 to some 
maximum to, each time running Grover's algorithm for the appropriate number 
of iterations, which is about n/A^/N/i for t marked elements. If the maximal 
error probability e which we allow is below about 1/N we have to use the exact 
version of Grover which is guaranteed to work for a given known number of 
marked elements. The total number of queries of this first step is about: 



which I've obtained by approximating the sum with an integraL The second 
part consists of a number of Grover runs for a random number of iterations 
smaller than the last Grover run of the first part. Thus we choose the number 
of iterations uniformly at random from the range 0..7r/4-\/iV/to- This I propose 
to do 2to times. Thus the second part consists of at most the following number 
of queries: 




It turns out that this choice of the number of Grover runs in the second part 
which gives equal number of queries for the first and second parts is optimal. 

In the second part we have probability about 1/2 to find a marked element 
in every run, provided the number of marked elements is larger than to ■ Say the 
actual (worst case) probability is some p (which is a bit smaller than 1/2 and 
which we will determine below), then e = (1 — p)^*" and we get the following 
number of queries for the total algorithm as a function of N and e: 



(1) 

Note the (admittedly small) improvement relative to the simpler algorithm de- 
scribed above. Note also that e as a function of T for a fixed N goes as 

which is of course better than the exponential we could achieve by just running 
the same probabilistic algorithm over and over. 

It turns out that the worst case detection probability p actually occurs for a 
number of marked elements t close to A^ . So if we want we can add a third part 
to the algorithm where we take care of this worst case by just classically checking 
a number of random inputs to the black box. To achieve the maximum allowed 
error probability e this only takes a number of queries that is of a smaller order 
than the number of queries used in the first two parts, thus we can neglect the 
cost of this third part. 

In the remainder of the paper I will determine the maximal error probability 
p for a Grover run with a random number of iterations and I will also give a 
simple argument that an exact version of Grover's algorithm can be constructed 
for a known number t of marked elements, which has been known before (I think 
it's by Peter Hoyer, but can't find a reference). 

3 Finding the maximal error probability p 

First we have to review Grover's algorithm: 



3.1 Grover's algorithm for t marked elements 

Each iteration of Grover's algorithm consists of the foUowing four steps: 

1. \y) ^ ^\y) for aU marked elements y 

2. H^ 

3. \x) ^ ~\x) for all x y^ 

4. H^ 

The initial state is the uniform amplitude superposition of all possible N inputs 
to the black box. The first step involves querying the oracle, while the second 
and fourth steps involve Hadamard transforming each of the I qubits (thus here 
we have TV = 2'). 

We can write the initial state as 

1*0) = cos(eo)^^ ^ |x) +sin(eo)^ J2 \y) 

Where M is the set of marked elements while cos(9o) = \/N — t/^/N and 
sin(eo) = Vi/y/N. 

It turns out (and is easy to see) that after any number of applications of 
the 4 steps of Grover's algorithm the state remains of the above form, thus a 
superposition with real coefficients of the uniform amplitude superposition of 
all unmarked (basis-) states and of the uniform amplitude superposition of all 
marked states. The actual calculation consists simply of applying the 4 above 
steps to each of these 2 states. In every iteration the state vector gets rotated 
by some angle 0, so after n iterations we have: 



|*„) = cos(eo + ne)-^== Y^ \x) + sin(eo + ne)-^ ^ \y) 
where is given by 






cos(e) = 1-2— and sin(e) = 2 ^^^ ^ 

It is easy to check that Qq = 0/2 which will facilitate the subsequent calcula- 
tions. 

The probability of finding a marked element after n steps is sin (Qo + nQ). If 
we choose the number of iterations uniformly at random from the range 0..fc — 1 
we get the success probability 

1 v^ 2. X 1 / sm{2ke)\ 



-ysin^(eo + n9) = - 1- ""^"," 
fc^o ^ ^ 2^ 2fcsin(e); 



Where the summation is easily accomplished because we can write the trigono- 
metric functions in terms of exponentials e*" which gives us geometric series. 
Also we used Qq = 0/2. Note that, as stated above, k w Tr/iy/N/ta. 



Now we have to look for the minimum of p (=worst case) over the range 
t = to..N of marked elements. The lower end of this range corresponds to 
2kQ — IT. The following plot shows p as a function of Q (here for k = 7). Note 
that e = 0..7r while t = 0..iV. 
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The point i = io is where p(8) first reaches 1/2. Significant for us is the 
next local minimum pi w 0.4358 and the last local minimum p2 ~ 0.3914, 
where I have taken the limit fc ^ oo to get these values. These two values are 



the absolute minimum (in our range) and the next larger local minimum. If 
we include the third part of the algorithm (classical checking) we don't have 
to worry about p2, thus p ~ pi. Then asymptotically the number of queries 
becomes (from equation M : 

T w 2MVNy^lnl/e 

The second graph above shows how the success probability evolves in Grover's 
algorithm for 3 cases of interest. The range shown in the plot is the range which 
we use in the second part of the algorithm, thus from to about n/iy^N/to 
iterations. The thick solid line is for Iq marked elements, for which the average 
probability over this range is 1/2. The dashed graph corresponds to the first 
local minimum in the first plot, whereas the dotted graph gives the last local 
minimum which occurs for only few unmarked elements. 

4 Exact Grover for known number of marked 
elements 

Here I give a simple argument why Grover's algorithm can easily be modified to 
give a correct answer for a known number t of marked elements. The problem 
with standard Grover is that sin^(0o + nQ) never exactly becomes 1. Our task 
now is to modify the 4 steps in Grover's algorithm so that we get a smaller 
rotation angle O' < 6. Imagine we apply these (modified) 4 steps to the initial 
(uniform amplitude) state. Usually in the 1. step we change the phase of the 
marked states by vr which allows us to increase the amplitude of the marked 
states to sin(8o + 0). If we don't change the phase it is easy to see that the 

4 steps of Grover's algorithm don't change the initial state at all, thus the 
amplitude of the marked states remains sin(0o). By continuity it is now clear 
that we can adjust the absolute value of the amplitude of the marked states 
to any value between these extremes. To get the amplitude back to real and 
positive we then call the black box once more to rotate the phase of the marked 
elements by the right amount. 

Actually one can avoid this last (additional) call to the black box by also 
choosing a different phase change in step 3, but this is not so easy to explain. 
Of course there are also various other ways to make Grover's algorithm exact. 

5 Remarks 

The algorithm we have constructed is clearly not optimal. It's order is optimal, 
as stated in corollary 3 on page 6 of |2|, but the performance can obviously 
still be improved by a multiplicative constant. My guess is that the number of 
queries can be reduced by at least a factor of 1.4, but probably by a factor of 2 
or more. Unfortunately no bound on the multiplicative constant is specified in 



In the second part of the algorithm we choose the number of iterations of 
Grover at random. This is not very elegant and certainly not optimal, but it 
makes the algorithm and the assessment of its performance easy. 

A general observation is that zero error algorithms are a rather academic 
and unphysical concept. Any computer has some failure probability, this is 
especially true for quantum computers. Fortunately fault tolerant techniques 
allow us to greatly increase the reliability. Essentially the error probability 
can be reduced exponentially in the resources we invest into fault tolerance 
which allows us to attain a reliability that is good enough for all practical 
purposes. So what about my use of the exact variant of Grover's algorithm? 
Actually we don't really need the exact version, we merely need to be able to 
greatly reduce the error without using many more queries. In a fault tolerant 
implementation we actually anyways can't really apply phase rotations by any 
amount because we only can use a finite "universal" set of gates. The better 
we want to approximate a given phase rotation the more such gates we have to 
use. Fortunately the number of gates necessary typically only increases as the 
logarithm of the precision of the approximation. 

I would like to thank Richard Cleve for telling me about the problem which 
is solved in this paper. 
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